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Claim Amendments 




1 -5 . (canceled without prejudice on 4/08/2003) 
6. (canceled on 5/19/2000) 
7-11. (canceled without prejudice on 4/8/2003 ) 
12-13. (canceled on 11/6/2002) 
14-24. (canceled without prejudice on 4/8/2003) 
25. (canceled on 1 1/6/2002) 
26-30. (canceled without prejudice on 4/8/2003) 
31-43. (canceled on 2/21/2001) 
44-47. (canceled without prejudice on 4/8/2003) 

48. (previously presented) A method for automatically disbursing a first partyV 
personal information to a second party authorized by the first party by transmitting said 
first party's personal information from a server computer operated by a service provider, 
said server computer coupled to a database, the method comprising the steps of: 

establishing an account for the first party with the server computer; 

assigning an identifier to the first party; 

entering the first party's personal information, said first party's personal 
information comprising at least one of a plurality of information objects; 

assigning, by the first party, at least one of a plurality of security levels to each 
information object at any granularity, thereby enabling access to individually selected 
portions of the first party's personal information by individual receiving parties; 

storing in the database the first party identifier, the information object and the 
security level assigned to the information object; 

receiving a request, said request comprising at least the first party identifier; 

in response to the request, selecting a first portion of the first party's personal 
information objects that could be transmitted to a second party; 

retrieving from the database the selected first portion of personal information 
objects; and 

securely transmitting the retrieved first portion of personal information objects to 
the second party. 
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49. (previously presented) The method of claim 48, further comprising the steps of: 
presenting an authorization by the second party; and 
verifying the second party's authorization. 

50. (previously presented) The method of claim 49, further comprising the steps of: 
obtaining a second party identifier; 

if the second party is not authorized to receive the information, recording the 
second party identifier; and 

rejecting the second party's request for information. 

5 1 . (previously presented) The method of claim 50, further comprising the steps of: 
designating the second party as a junk requester if the second party presents a 

predetennined number of requests that are not authorized; and 
generating an alarm indication. 

52. (previously presented) The method of claim 48, further comprising the step of 
recording every access of the first party's personal information to create an audit trail. 

53. (previously presented) The method of claim 48, further comprising the steps of: 
generating an authorization key; and 
providing the authorization key to the second party. 

54. (previously presented) The method of claim 53, wherein the step of generating an. 
authorization key comprises the steps of: 

selecting at least one set of information objects, the set of selected information 
objects comprising at least one piece of the first party's personal information; and 
creating a key to authorize access of the selected set of information objects. 

55. (previously presented) The method of claim 53, wherein the step of generating 
an authorization key comprises the step of: 
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selecting the characteristics of second party that can present the authoization key 
for information. 

56. (previously presented) The method of claim 53, further comprising the step of; 
encoding the authorization key with at least one of a plurality of attributes. 

57. (previously presented) The method of claim 56, wherein the at l east one of a 
plurality of attributes includes an attribute of a the second party who may present the 
authorization key to access the first party's information. 

58. (previously presented) The method of claim 48, further comprising the steps of: 
altering the first party's personal information; and 



59. (previously presented) The method of claim 58 s wherein the step of transmitting 
further comprises the step of: 

designating an entity to receive said altered personal information; 
optionally designating an effective date for said alteration; and 
transmitting the altered personal information to the designated entity. 

60. (previously presented) The method of claim 48 , wherein the step of securely 
transmitting the information object comprises the step of: 

transmitting the information object via a communication network to a device 
coupled to the communication network. 

61 . (previously presented) The method of claim 60, wherein the device is a printer 
coupled to the communication network directly via the Internet Printing Protocol. 

62. (previously presented) The method of claim 48, wherein the step of securely 
transmitting the information object further comprises the step of: 

transmitting the information object via secure E-mail or public key encryption. 




storing said altered personal information in the database. 
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63. (previously presented) The method of claim 48, wherein the first party's 
personal information includes the first party's contact information; health-related 
information; medical, dental, information; credit/employment information; insurance 
information; property-related information; personal demographic information; family 
medical history; biometric/genetic information; travel/hotel preferences; internet 
preferences; sartorial, fashion preferences; magazine, movies, book preferences; leisure 
preferences; preferences for billing or payment methods, or pleasure-related preferences. 

64. (previously presented) The method of claim 48, further comprising the step of: 
receiving an authorization key from the second party. 

65. (previously presented) The method of claim 48, further comprising the step of: 



authenticating the second party. 

66. (previously presented) The method of claim 48, wherein the step of receiving a 
request message from the second party comprises the step of: 

receiving a query for the first party's personal information in a readily executable 

form. 

67. (previously presented) The method of claim 48, further comprising the step of: 
periodi cally generating a report on the transmittal of the information. 

68. (previously presented) A method for securing a first party's personal information, 
the method comprising the steps of: 

entering the first party's personal information, said first party's personal 
information comprising at least one of a plurality of information objects; and 

assigning, by the first party, at least one of a plurality of security levels at any 
granularity to each one of the at least one of a plurality of information objects. 

69. (currently amended) A program storage device readable by a processor, said 
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storage device tangibly embodying a program of instructions executable by the processor 
to perform the method steps for secure delivery of a first party's personal information via 
a communication network, said method steps comprising: 

storing the first party's personal, information, said first party's personal 
information comprising at least one of a plurality of information objects; 

associating, by the first party, each one of the plurality of information objects with 
at least one of a plurality of security clearance levels at any granularity; 

receiving a request message to access the first party's personal information, said 
request message comprising an authorization key to access a first portion of the first 
party's personal information associated with a first security clearance level , said 
authorization key indicati ve of a second security clearance level; 

comparing the first security clearance level and the second security clearance 
level to determine an appropriate overall clearance level; 

matching the request message and the overall clearance level with a second 
portion of the first party's personal information; and 

securely transmitting the second portion of the first party's personal information. 

70. (previously presented) The program storage device of claim 69, further 
comprising program of instructions executable by the processor to perform the method 
steps of: 

authenticating the request message. 

71 . (previously presented) The program storage device of claim 69, further 
comprising program of instructions executable by the processor to perform the method 
step of: 

establishing a secure audit trail of each access of the first party's personal 
information. 

12. (currently amended) The program storage device of claim 71 wherein the 
program of instructions executable by the processor to perform the method step of 
establishing a secure audit trail include program of instructions executable by the . 
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processor to perform the method step of recording an identifier to identify a party that 
receives the first party *s personal information. 

73 . (currently amended) The program storage device of claim 71 TO, wherein the 
program of instructions executable by the processor to perform the method step of 
establishing the secure audit trail include program of instructions executable by the 
processor to perform the method step of recording an identifier to identify a second party. 

(previously presented) The method of claim 48, further comprising the step of: 
generating an authorization key; 
providing the authorization key to the second party; and 
encoding the authorization key with at least one of a plurality of criteria. 

75* (previously presented) The method of claim 74, wherein the at least one of a 
plurality of criteria includes a criterion to indicate the information that can be accessed by 
the second party with the authorization key. 

76. (previously presented) The method of claim 74 ? wherein the at least one of a 
plurality of criteria includes a criterion to indicate the number of times the authorization 
key can be used by the second party to obtain access. 

77. (previously presented) The method of claim 74, wherein the at least one of a 
plurality of criteria includes a criterion designating the category of the first party's 
personal information that can be accessed by the second party using the authorization 
key. 
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